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Block  No.  20  ABSTRACT 

'4 

A  solid  state  power  controller  has  been  designed  in  four  ratings 
to  switch  28vdC  power  to  selected  loads  upon  remote  command.  The 
four  ratings  trip  out  at  currents  of  10,  5,  2  and  1/2  amps.  The 
design  allows  for  wide  variations  in  load  and  supply  voltage  and 
will  not  trip  out  on  short  load  transients  of  up  to  1000%  of  rated 
load  current.  In  case  of  failure  of  the  controller  circuitry,  an 
internal  fuse  protects  the  load  from  excessive  current.  The  control 
current  which  operates  the  controller  also  provides  a  sensing  function 
so  that  the  state  of  the  controller^  can  be  determined  remotely.  The 

controllers  are  designed  to  operate  over  a  case  temperature  range  of. 

sJ-  >xY . . . 

-54*C  to  120*0.  A  quantity  of  100  units  have  been  fabricated,  tested, 
and  supplied  to  the  Navy. 
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1.0  INTRODUCTION - - 

The  Filial  Report  for  the  DC  Controller  program  was  prepared 
for  the  Naval  Air  Development  Center  under  Contract  4N62269-77-C- 
0413.  The  text  describes  the  circuit  operation,  physical  construc¬ 


tion,  assembly  techniques  and  test  procedures  used  in  the 
manufacturing  of  one  hundred  power  controllers .  The  controllers 
delivered  operate  from  a  nominal  28V  supply  and  are  rated  for 
either  10A,  5A,  2A  or  1/2A  output  load.  These  units  were  designed 
to  comply  with  the  requirements  of  Specification  No.  NADC-3Q-TS- 


7602  dated  27  April  1976. 

•  ~  ■*'■■** 

This  report  describes  the  electrical  design  in  Section  2, 

the  physical  design  in  Section  3,  and  the  manufacturing  process 
in  Section  4.  Appendix  A  is  the  parts  list. 
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2.0  CIRCUIT  DESIGN  AND_JOPERATION. __ 

...  2.1  General  Description _ 

The  electrical  design  of  the  DC  power  controller  was  divided 
into  three  subcircuits  each  of  which  was  incorporated  as  a  thick- 
film  hybrid.  As  shown  in  Figure  1  the  Power, 

Logic  and  Amplifier  hybrids  provide  all  switching,  sensing,  control 
and  voltage  regulator  functions  internal  to  the  controller.  Since 
the  internal  sense  and  control  functions  are  not  dependent  on  the 
power  rating  of  the  controller  module,  the  logic  and  amplifier 
hybrids  are  identical  for  all  controllers  produced.  The  power 
hybrid  is  constructed  with  a  maximum  of  four  parallel  power  switch¬ 
ing  stages  for  a  10A  rated  unit.  For  5A,  2A  or  1/2A  rated  controllers 
the  same  ceramic  substrate  was  used  for  the  power  deck  construction 
but  with  fewer  of  the  parallel  switching  sections  implemented. 

By  using  this  technique,  effectively,  only  one  power  hybrid  had 
to  be  developed  and  the  physical  design  task  was  reduced  to  devel¬ 
oping  only  one  controller  type.  Figure  2a  shows  the  unit  with  the 
cover  on,  and  Figure  2b,  2c  and  2d  show  the  unit  with  the  cover  off. 

2.2  Subcircuit  Design  and  Operation 

The  three  subcircuits  of  each  controller  were  partitioned 
so  that  the  interconnection  between  the  hybrids  would  be  minimized 
as  shown  in  Figure  1.  The  amplifier  and  logic  hybrids  were  joined 
back  to  back  in  a  sandwich  arrangement  with  three  opto-couplers 
mounted  on  the  side  to  form  the  control  subassembly.  The  power 
hybrid  was  soldered  onto  the  steel  header  and  a  discrete  diode  was 
added  internal  to  the  terminal  posts  to  form  the  power  subassembly. 
The  interconnections  between  the  two  subassemblies  were  then  reduced 
to  five  interface  wires  in  addition  to  four  of  the  five  terminal 
posts  brought  in  from  the  outside  of  the  controller. 
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General  Block  Diagram 
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2.2.1  Logic  Subcircuit 

Figure  3  shows  a  block  diagram  of  the  DC  Controller  portion 
contained  in  the  outlined  area  at  the  left.  The  logic  subcircuit 
consists  of  the  control  input  interface,  a  12.5  volt  precision  volt¬ 
age  regulator,  the  three  CMOS  IC's  which  perform  as  the  internal 
control  logic  and  part  of  the  rise/fall  time  circuitry.  Figure  4 
is  a  schematic  diagram  of  the  logic  hybrid.  - - 

2. 2. 1.1  Control  Input/BIT  Response 

The  control  input  interface  circuit  is  composed  of  three  opto- 
couplers  mounted  off-board  anddiscrete  chip  semiconductors . 

The  circuit  was  designed  to  provide  1000  VAC  RMS  isolation  between 
the  controller's  external  control  lines  and  the  power  and  ground. 

In  addition  to  providing  a  turn  on  signal  to  the  control  logic, 
the  input  circuit  will  alter  its  impedance  between  the  two  input 
terminals  to  indicate  one  of  three  values  dependent  on  the  operational 
state  of  the  controller:  42QD  for  a  trip  condition,  720D  during 
normal  operation,  and  HOOD  if  a  fault  has  been  detected  when  the 
input  signal  status  is  compared  to  the  controller's  output  current. 

The  input  signal  current  is  divided  between  the  Z3  LED,  used  to 
indicate  a  turn-on  signal  to  the  logic,  the  ballasting  resistor  for 
zener  diode  Dl,  and  two  current  sources  that  are  set  by  the  state  of 
the  controller.  The  zener  diode  develops  a  reference  voltage  of 
approximately  3  volts  that  is  used  for  the  Q20  constant  current 
source.  This  insures  sufficient  LED  current  for  proper  operation 
of  Z3  independent  of  the  rest  of  the  input  circuitry  and  over  the 
120 °C  temperature  range.  Ql  and  Q2  also  act  as  current  sources  that 
tap  a  portion  of  the  lOma  input  current  when  they  are  turned  on 
by  Z1  or  Z2,  thus  altering  the  circuit's  effective  input  impedance. 

If  the  controller  is  in  the  tripped  condition,  both  Z1  and  Z2  are 
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Block  Diagram 
Logic  Hybrid  Outlined 
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turned  on  with  saturated  photo  transistors.  The  potential  across 
R2  and  R3  is  then  about  ,8V  below  the  D1  zener  voltage.  These  two 
paths  tap  a  portion  of  the  lOma  control  current  thus  reducing  the 
current  through  R6  and  therefore  reducing  the  voltage  across  this 
resistor.  Under  these  conditions,  the  voltage  drop  across  the 
input  terminals  will  be  about  4.2V  when  a  lOma  input  signal  is 
applied  to  the  controller.  If  the  controller  is  in  a  normal  oper¬ 
ating  condition,  either  passing  output  current  with  an  applied 
input  signal  or  turned  off  when  no  signal  is  applied,  Zl  will  be 
turned  on  and  Z2  will  be  turned  off.  During  the  normal  on  condition, 
the  lOma  DC  input  will  develop  7.2V  between  the  input  terminals. 

During  the  normal  off  state,  the  controller  will  respond  with  the 
7.2V  level  in  less  than  50  jis.  Since  the  controller  output  will  not 
respond  in  less  than  100  pa,  the  proper  off  state  operation  of  the 
controller  may  be  ascertained  by  short  duration  interrogation  pulses. 
If  a  fault  condition  is  detected  by  the  control  circuitry  (output 
current  without  an  applied  input  signal  or  no  output  with  input 
applied) ,  both  Zl  and  Z2  will  remain  off,  the  input  current  will  be 
divided  between  R6  and  Z3,  and  the  input  voltage  drop  will  be  11V. 

If  the  voltage  supply  is  removed  from  the  Power  In  terminal,  there 
will  be  no  supply  to  the  logic  circuitry  or  Zl  and  Z2.  Therefore,  if 
Control  Input  current  is  applied, a  fault  condition  will  also  be 
indicated.  If  the  controller  is  delivering  load  currant  without  an 
applied  input  signal,  the  fault  condition  can  be  sensed  by  application 
of  an  interrogation  pulse. 
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2. 2. 1.2  Control  Logic 

Upon  application  of  input  signal,  the  transistor  of  opto-coupler 
Z1  turns  on,  allowing  the  input  of  buffer  Ul/A  to  go  high.  Rll, 

Cl,  and  the  inverter /buffer,  Ul/B,  will  cause  a  200  microsecond 
delay  of  the  input  signal.  This  will  allow  sampling  of  the  BIT 
state  of  the  input  circuit  before  turning  on  the  controller. 

The  output  of  Ul/B  is  fed  into  the  off-time  integrator  composed 
of  R13,  C2  and  D2.  The  output  of  the  integrator  is  buffered  by 
U3/C  and  U3/D  and  fed  into  the  reset  input  of  the  trip  state  flip- 
flop.  The  off-time  integrator  will  not  allow  the  flip-flop  to 
reset  when  a  trip  condition  has  occurred  until  after  the  control 
input  has  been  removed  for  at  least  6ms. 

The  trip  state  flip-flop  is  composed  of  the  two  NAND  gates  of 
U3/A  and  B.  Gate  U2/C  compares  the  output  of  the  trip  state 
flip-flop  versus  the  delayed  input  state  in  order  to  turn  on  the 
output  stage  of  the  controller.  The  output  of  the  trip  state 
flip-flop  is  also  buffered  by  U2/A  and  fed  to  opto-coupler  Z2  in 
order  to  relay  the  trip  state  to  the  input  circuit.  Ul/3  generates 
the  fault  status  of  the  controller  so  that  a  fault  signal  will 
occur  if  either  there  is  an  input  signal  without  detection  of 
10%  rated  controller  output  from  Min  I  or  if  there  is  current 
output  without  application  of  input  signal.  The  output  is  fed 
to  U2/B  which  is  lit  during  a  no- fault  state.  In  the  event  that 
input  power  to  the  controller  is  removed,  the  LED  of  Z3  will 
extinguish,  thus  also  indicating  the  fault  state. 
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2. 2. 1.3  Ref,  Ramp 

The  output  of  U2/C  is  inverted  and  buffered  by  U2/D  which 
feeds  the  bases  of  the  PNP  and  NPN  transistors.  During  an  ON 
command  to  the  controller,  the  output  of  02/D  is  low,  turning 
on  Q17  and  turning  off  Q18.  The  collector  of  Q17  reflects  a 
scaled  down  voltage  of  the  applied  power  input  from  the  supply 
reference  voltage  developed  on  the  amplifier  hybrid.  This  gener¬ 
ates  an  ON  reference  curve  through  R18  and  C3  up  to  the  value  of 
the  input  reference  voltage.  This  reference  ramp  is  fed  into 
the  POWER  ON  amplifier  on  the  amplifier  hybrid  in  order  to  control 
the  of  the  rising  and  falling  edge  of  the  power  output. 

2. 2. 1.4  Regulated  Power  Supply 

The  voltage  regulator  IC  U7  provides  a  stable  interne1  supply 
and  reference  voltage  over  variations  in  temperature  and  power 
input  voltage.  Q15  and  Zener  D5,  provide  protection  to  the 
regulator  IC  input  during  80  volt  transients  applied  to  the  input. 
The  12.5  volt  output  taken  from  the  buffering  output  of  Q19  is 
used  to  supply  the  CMOS  logic,  the  quad  voltage  comparator,  quad 
op-amp  IC's  of  the  current  detectors,  and  logic  side  of  the 
opto-couplers . 

2.2.2  Amplifier  Subcircuit 

Figure  5  has  an  outline  around  the  Amplifier  portion  of  the 
block  diagram.  Figure  6  is  a  detailed  schematic  of  the  Amplifier 
hybrid.  The  Amplifier  circuitry  is  constructed  with  a  quad  voltage 
comparator  U6  and  a  quad  operational  amplifier  U5.  These  analog  com 
ponents  provide  the  level  sensing  to  detect  fault  and  trip  condi* 
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Block  Diagram-Amplifier  Hybrid  Outlined 
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tions  within  the  controller  and  supply  the  control  interface  to  the 
power  subcircuit. 


I  _ _ _ _ _ _ 

2. 2, 2.1  Sense  Amplifier 

The  current  output  o£  the  controller  is  sensed  by  a  propor- 
j  tional  voltage  drop  referenced  to  the  power  input  terminal.  The 

resistor  bridge  of  R14,  R15,  R53  and  R54  provides  a  scaled  down 
level  of  the  sensed  voltage  to  the  input  of  the  sense  amplifier 
so  that,  at  the  maximum  power'  input  voltage  of  30V,  the  common 
mode  level  to  the  op- amp  is  within  the  proper  operating  range . 

R48  and  R49  provide  an  offset  to  the  sense  amplifier  so  that  when 
the  sense  voltage  is  zero,  the  output  of  the  sense  amplifier  will  be 
IV.  This  offset  insures  proper  operation  of  the  minimum  current 
detector  by  increasing  the  common  mode  detection  level  above  0V. 


The  net  result  of  the  sense  amplifier  circuit  is  that  for 

Ieach  100%  increase  in  the  power  output  current  to  the  load,  the 

sense  amplifier  output  will  proportionally  increase  by  ,9V.  Thus, 
with  no  power  output  current,  the  sense  amp  output  will  be  just 
the  1  volt  offset.  At  the  10%  level  of  rated  controller  output, 

I?  the  amp  output  will  be  1.09V;  at  the  rated  controller  output 

j  current,  the  amp  output  will  be  1.9V,  and  at  1000%  of  rated  controller 

output,  the  sense  amp  output  will  be  10V. 

|  The  amplified  sense  voltage  is  fed  into  a  minimum  current 

detector  of  U6/C,  a  trip  time  integrator  composed  of  U5/B  and 
U6/A,  a  maximum  trip  limit  detector  of  U6/B  and  a  gain  compensa- 
]  tion  amplifier  composed  of  U5/C.  The  reference  inputs  to  these 

•  four  stages  are  derived  from  a  voltage  divider  which  is  tied  to 

I  I  the  regulated  supply  of  the  controller. 
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2. 2. 2. 2  Minimum  Current  Detector 

The  voltage  comparator,  U6/B,  is  used  as  the  minimum  current 
detector  and  switches  at  the  amplified  sense  voltage  equivalent 
to  an  output  of  11%  rated  load  current.  R35  is  a  pull  up  resistor 
tied  to  the  comparator ' s  open  collector  output  so  that  0  to  12 . 5V 
logic  levels  will  be  relayed  to  the  logic  hybrid. 

2. 2. 2. 3  Trip  Timing 

The  trip  time  integrator,  0 5/B,  generates  a  ramp  voltage 
whose  slope  is  in  proportion  to  the  difference-  of  the  output  of 
the  sense  amplifier  and  the  125%  rated  load  reference  point  taken 
between  R45  and  R46.  Thus,  the  delay  between  application  of  an 
overcurrent  condition  and  the  time  the  voltage  comparator,  06/A, 
trips  low,  will  be  in  proportion  to  the  amount  of  power  output 
current  that  exceeds  125%  of  rated  load.  The  result  is  a  switching 
time  in  accordance  with  the  trip  timing  curve  as  shown  in  Figure  7 , 
Region  X. 


2. 2. 2. 4  Maximum  Current  Detector 

The  Maximum  Current  Detector,  U6/D,  is  a  voltage  comparator 
that  will  trip  out  the  controller  in  less  than  1ms  when  the  load 
current  exceeds  1000%  of  the  rated  output.  At  the  1000%  level, 
as  shown  in  Figure  7,  Region  II,  the  controller  must  trip  out  in 
less  than  100ms.  Since  the  voltage  comparators  of  the  trip  time 
integrator  and  maximum  current  detector  have  open  collector 
outputs,  they  may  be  phantom  ar'ed  together  so  that  either  trip 
limit  will  be  indicated  by  the  low  logic  level  at  the  common  node. 
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2. 2. 2. 5  Gain  Compensation 

In  order  to  minimize  the  power  dissipation  of  the  controller 
during  normal  operation/  extra  output  stage  drive  to  the  solid 
state  switch  is  added  only  during  the  over -current  condition. 

The  Gain  Compensation  amplifier,  U5/C,  provides  this  drive  as  a 
voltage  between  2.5V  and  10V  that  is  proportional  to  the  output 
over-current.  The  voltage  comparator,  U6/D,  inhibits  the  gain 
comp,  output  if  the  load  current  is  less  than  125%  rated  controller 
current. 

2. 2. 2. 6  Rise/Fall  Timing  Amplifier 

The  operational  amplifier,  U5/A,  is  part  of  a  feedback  loop 
that  controls  the  rise  and  fall  time  of  the  controller's  power  output 
voltage  so  that  proper  operation  can  be  maintained  over  variations  in 
operating  voltage,  temperature,  and  nominal  load  current.  The 
amplifier  monitors  the  scaled-down  voltage  of  the  output  terminal 
through  R63  and  R19,  and  adjusts  the  drive  to  the  power  switch  so  that 
the  rise  or  falling  edges  of  power  output  voltage  will  track  a  sampled 
section  of  the  reference  ramp  generated  by  the  control  logic. 

2.2.3  Power  Subcircuit 

The  Power  Subcircuit,  shown  in  the  outlined  portion  of  the 
Block  Diagram,  Figure  8,  contains  the  function  that  senses  the 
output  current  to  the  load  and  provides  the  solid  state  switch¬ 
ing  of  the  load  current.  Also  included  on  this  hybrid  are  the 
components  needed  to  suppress  high  voltage,  short  duration 
transients.  Figure  9a  is  the  schematic  diagram  of  the  Power 
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Fig.  8 

Block  Diagram-Power  Hybrid  Outlined 


1 


Power  Hybrid  Schanatic-10  Amp 


i tic-2  Anp 


tic- 1/2  Anp 
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Hybrid— 10  amp.  version.  Figures  9b  through  9d  are  the  lower 
current  versions. 

2. 2. 3.1  Solid  State  Switch 

The  solid  state  switch  function  can  be  divided  into  a  power 
switching  section  and  the  control  to  the  power  switch,  as  shown 
in  Figure  9.  The  power  switch  is  composed  of  four  pseudo 
Darlington  pair  stages  connected  in  parallel  for  a  10A  configured 
controller#  two  parallel  stages  for  a  5A  controller#  and  a  single 
stage  for  2a  and  1/2A  rated  units.  The  output  transistor  of 
the  Darlington  pair  was  selected  for  its  low  leakage  current  at 
100°C  in  conjunction  with  its  need  to  deliver  high  currents  in 
the  on  state  with  minimum  collector  to  emitter  voltage  drop.  The 
gain  and  peak  current  capability  had  to  be  sufficient  so  that  at 
the  controller  header  temperatures  of  120*C#  each  Darlington  pair 
could  deliver  25  amperes.  The  output  transistor  is  designed  to 
operate  just  out  of  the  saturation  region  in  order  to  minimize 
the  voltage  drop  from  the  input  to  output  terminals  and  to  also 
reduce  the  effects  of  the  variation  of  transistor  gain. 

The  output  transistor,  RCA  67654#  is  similar  to  a  2N6327 but 
is  selected  for  its  low  leakage  and  guaranteed  gain  at  low  temper 
ature.  This  passivated  transistor  also  uses  a  fabrication 
technology  that  allows  the  device  to  be  soldered  to  the  hybrid 
substrate. 
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The  drive  transistor,  a  2N3792,  is  forced  to  operate  fully 
into  saturation.  The  total  voltage  drop  across  the  output  pair 
is  then  the  saturation  voltage  of  the  drive  transistor,  plus 
the  base  to  emitter  drop  of  the  output  transistor.  The  base  pull 
down  resistor  of  each  output  transistor  insures  minimum  leakage 
current  at  elevated  temperatures. 

The  control  section  of  the  solid  state  switch  is  similar 
in  design  over  all  of  the  controller  current  ratings.  The  semi¬ 
conductor  parts  remain  the  same  for  all  controllers  but,  in  order 
to  reduce  the  on  stage  power  dissipation,  the  resistor  values 
selected  are  depndent  on  the  controller  output  current  rating. 

During  normal  operation  up  to  rated  output  current,  the 
GAIN  COMP  input  insures  that  Q3  is  turned  off  and  that  the  control 
to  the  solid  state  switch  is  applied  from  the  POWER  ON  lead  from 
the  amplifier  hybrid.  Since  Q3  is  off,  there  is  no  supply  current 
to  the  collector  of  Q4,  or  the  base  of  Q5,  therefore  eliminating 
them  from  acting  as  gain  stages.  The  base  drive  to  Q6  is  therefore 
only  the  current  supplied  from  the  POWER  ON  input.  The  drive  to 
Q6  insures  that  it  is  saturated.  Since  Q5  is  inactive,  the  drive 
current  to  the  power  switching  section  is  determined  predominantly 
by  R26.  This  resistor  value  is  determined  by  the  worst  case  gain 
condition  of  the  output  when  the  POWER  IN  terminal  is  held  at  17.5V, 
During  an  overcurrent  condition,  the  GAIN  COMP  signal  increases  in 
proportion  to  the  output  current,  thus  turning  on  Q3.  This  now 
allows  Q4  to  supply  extra  drive  to  Q6  to  maintain  it  in  saturation 
and  also  allows  Q5  and  R64  to  act  as  a  current  source.  The  result 
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is  then  the  added  drive  current  required  by  the  output  transistors 
during  the  high  load  current  surges ,  but  without  effecting  the 
power  dissipation  during  normal  operation. 

2 . 2 . 3 . 2  Current  Sense 

Detection  of  the  controllers  output  current  is  achieved  by 
the  placement  of  thick  film  resistors  in  series  with  the  output 
current  path.  Each  output  transistor  pair  has  a  sense  resistor 
that  is  specified  to  have  . 2V  drop  when  the  stage  is  passing  its 
rated  capability.  Since  for  10A  and  5A  controllers  the  individual 
output  stages  are  designed  to  pass  2.5A  when  delivering  rated 
capacity,  the  sense  resistor  value  used  would  be  80  milliohms. 

The  2A  and  1/2A  controllers  only  use  one  output  stage  and  therefore 
the  sense  resistors  used  with  those  units  would  be  100  mft  and  400  mft 
respectively. 

The  sense  resistors  also  provide  a  ballasting  effect  in  the 
multiple  stage  5A  and  10A  controllers.  In  the  event  that  any 
single  output  stage  begins  to  pass  more  current  than  any  other 
parallel  stage,  the  sense  drop  of  that  series  resistor  will  increase, 
thus  reducing  the  emitter  to  base  drop  of  that  particular  drive 
transistor.  This  will  reduce  the  drive  current  to  the  dominant 
output  transistor. 

The  sense  resistor  voltage  drops  are  summed  together  through 
50ft  resistors  to  a  common  node.  The  summing  resistors  also  provide 
isolation  between  stages  so  that  the  ballasting  effect  can  be 
maintained. 
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The  sense  resistors  also  provide  the  fail-safe  fusing  function. 
Experiments  with  a  separate  fuse  wire  that  would  have  been  incorp¬ 
orated  as  part  of  the  power  hybrid,  did  not  provide  confidence  for 
repeatable  unit- to- unit  results.  Sense  resistors  subjected  to 
over-current  surges  would  blow  out  more  uniformly  as  shown  in 
Figure  10.  The  results  indicated  that  the  resistors  would  open 
above  the  valid  fusing  curve  at  the  lower  overload  currents  and 
that  they  would  not  blow  out  in  the  valid  trip-out  region.  Results 
using  the  coil  were  as  a  fuse  element  indicated  that  violation  of 
the  power  controller  trip  area  was  possible  (See  Figure  10) . 


-28- 


K 


*  Fig.  10 

Resistor  Fusing  Characteristics 


NADC-76215-30 


3.0  PHYSICAL  DESIGN 

The  controller  mechanical  design  required  minimization  of 
the  volume  and  weight  but  with  a  rugged  construction  that  could 
withstand  lOOG's  of  shock  and  a  rigorous  vibration  cycle.  In 
order  to  meet  these  requirements ,  plus  a  -65°C  to  150°C  storage 
temperature ,  the  controller  circuitry  was  contained  within  a 
steel  cover  mounted  to  a  cold  rolled  steel  header  base  plate. 

Figure  11a  is  a  sketch  of  the  design. 

3.1  Header  and  Cover 

The  design  for  the  controller  package  as  dictated  by 
Specification  No.  NADC-30-TX-7602/01,  required  five  terminals 
to  be  mounted  on  the  base  plate  assembly.  Since  open  semiconductor 
chips  were  used  in  the  design ,  the  package  was  required  to  be 
hermetic.  Hence,  in  order  to  make  contact  with  the  internal 
circuitry,  the  terminal  posts  used  a  glass  to  metal  terminal 

to  isolate  them  from  the  metal  header. 

Initial  calculations  indicated  that  using  the  .200  inch 
terminal  spacing  specified  by  the  slash  sheet,  would  not  allow  the 
controller  to  pass  the  required  dielectric  withstanding  voltage 
test  at  a  pressure  equivalent  of  100,000  feet  altitude.  Tests 
were  performed  assuming  a  .350  inch  terminal  spacing  and  using 
a  .250  inch  diameter  glass  bead.  Under  a  500V  potential,  this 
design  withstood  voltage  breakdown  until  the  70,000  foot  equiva¬ 
lent  pressure  was  reached.  To  incorporate  the  large  insulation 
spacing  required,  the  header  layout  was  altered  to  that  shown  in 
Figures  11a,  lib  and  11c,  and  terminal  hooks  were  incorporated  as 
per  NADC  request. 
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Due  to  the  similar  internal  construction  of  all  controllers, 
only  one  type  of  cover  was  manufactured  for  all  controller  ratings. 

This  tin  plated  steel  cap  was  then  soldered  to  the  plated  header 
after  the  hybrids  were  installed.  An  evacuation  hole  in  the  top 
of  the  cover  provided  the  final  seal. 

3 . 2  Internal  Construction 

As  shown  in  Figure  11a  and  lid,  the  three  hybrids  that  contain  all 

the  controller  circuitry  are  arranged  in  two  separate  layers »  The _ 

bottom  layer  is  the  power  subassembly  and  consists  of  the  header 
baseplate,  the  power  hybrid  and  a  discrete  diode.  The  top  layer 
is  the  control  subassembly  and  is  composed  of  the  logic  and  amplifier 
hybrids,  and  three  opto-couplers . 

3.2.1  Power  Subassembly 

The  power  subassembly  identifies  the  controller's  output 
current  rating  by  the  capacity  of  the  power  hybrid  soldered  to  it. 

In  order  to  minimize  the  thermal  resistance  between  the  power 
transistors  and  the  header  heat  sink,  beryllia  oxide  was  selected 
for  the  power  hybrid  substrate.  The  power  hybrid  is  fabricated 
from  .040  inch  thick  beryllia,  with  a  final  thick  film  copper  back¬ 
plane  and  copper  metallization  on  the  top  surface. 

Copper  metallization  was  specified  because  of  its  good 
electrical  conductivity,  reduced  metal  scavaging  during  the  high 
temperature  soldering  of  power  transistors,  and  lower  thermal 
resistance  than  other  types  of  metallization. 
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Major  power  transistors  used  a  soldered  back  technology  and 
the  lower  current  semiconductors  were  attached  with  conductive 
epoxy. 


Interconnection  to  all  but  the  power  output  transistors  was 
made  with  appropriate  size  and  number  of  gold  wire  bonds.  The 
power  transistor  emitter  and  base  contacts  were  made  with  clips 
attached  to  brass  posts.  As  indicated  in  Figure  12,  the  posts 
were  supported  and  aligned  by  holes  placed  in  the  beryllia.  After 
the  posts  were  soldered  to  the  copper  metallization,  the  alignment 
hole  was  then  backfilled  with  epoxy  to  provide  an  insulating 
barrier. 

Screened,  thick-film  resistor  chips  were  used  on  the  power 
substrate.  Using  chip  resistors  provided  the  advantage  of  having 
to  manufacture  only  one  type  of  (BeO)  substrate,  then  selecting 
the  chip  components  dependent  on  the  power  hybrids  current  rating. 

A  discrete  1N4 00 2  diode  was  incorporated  into  the  power  sub¬ 
assembly  by  supporting  it  between  the  POWER  IN  and  POWER  OUT 
terminal  posta.  The  axial  leads  of  this  device  then  provided 
the  mechanical  and  electrical  connection  to  the  subassembly. 

3.2.2  Control  Subassembly 


I 


The  top  level  of  the  controller  circuitry  is  constructed  of 
the  logic  and  amplifier  hybrids  placed  back-to-back  and  supported 


Figure  12. 

Cross-Section  of  Power  Hybrid 
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by  five  header  terminal  pins.  Besides  providing  the  mechanical 
support  to  hold  the  subassembly  firmly  in  place,  four  of  the 
five  terminal  pins  also  are  used  for  the  electrical  connections 
to  the  lower  level.  Two  of  the  terminal  pins  bring  the  control 
input  signal  directly  from  the  outside,  up  to  the  logic  hybrid. 

One  other  pin  ties  the  ground  to  the  subassembly  and  the  final 
pin  connection  monitors  the  response  of  the  power  out  terminal. 

Five  riser  wires  provide  additional  interface  between  the 
upper  and  lower  levels.  The  wire  contacts  are  made  by  solder 
connection  directly  to  the  power  hybrid  metallization  and  to  the 
wrap-around  clips  on  the  upper  level.  The  wrap-around  clips  also 
provide  the  electrical  interconnection  between  the  logic  and 
amplifier  hybrids. 

Three  opto-couplers  are  cantilevered  on  one  side  of  the 
upper  assembly.  These  TO-18  case  units  make  mechanical  and 
electrical  connection  via  the  four  wire  leads  which  protrude 
from  the  bottom  of  the  opto-coupler  as  indicated  in  Figure  13. 
Electrical  interconnection  from  the  lead  contacts  on  the  amplifier 
hybrid  side  to  where  the  input  circuit  resides  on  the  logic  hybrid, 
is  made  with  copper  straps. 
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4.0  MANUFACTURING  AND  TESTING 

The  sequence  for  producing  an  integrated  controller  involved 
first,  the  construction  of  the  three  hybrid  types,  then  assembling 
each  subassembly,  and  then  final  integration  and  seal. 

Parts  were  tested  throughout  the  production  cycle  so  that  any 
circuit  failure  could  be  detected  as  early  as  possible  and  to 
also  insure  that  the  controller,  when'  sealed,  would  fully  comply 
with  the  specification  requirements.  Figures  14  a,  b  and  c  detail 
the  assembly  and  testing  steps  required  from  substrate  printing 
to  delivery  of  completed  and  tested  controllers. 

4 . 1  Control  Subassembly 

Similar  construction  sequences  were  used  to  assemble  the 
logic  and  amplifier  hybrids.  At  steps  LI  and  Al,  as  shown  on 
Figure  14a,  the  substrate  was  constructed  with  multiple  levels 
of  printing  of  thick  film  resistor  and  conductor  traces.  Trim¬ 
ming  resistors  to  value  was  also  included  at  this  production 
level.  At  the  second  level  (L2  and  A2) ,  semiconductor  chips 
were  epoxied  to  the  substrate  and,  after  a  high  temperature 
cure,  these  parts  were  wire  bonded  to  the  substrate  to  make 
their  electrical  connections.  After  bonding,  the  hybrids  were 
checked  for  proper  operation. 
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Incorporated  as  part  of  the  procedures,  all  hybrids  were 
visually  inspected  to  detect  abnormalities  prior  to  being  powered 
up.  Since  both  logic  and  amplifier  substrates  require  active 
trimming  to  bring  operational  tolerances  within  limits,  rudimentary 
tests  (L3  and  A3}  were  performed  to  exercise  those  components 
affected  by  dynamic  trimming.  The  test  point  measured  during  the 
trim  procedure  was  recorded  at  the  trim  facility  and  remeasured 
after  trimming  at  the  evaluation  test  position.  This  would  detect 
differences  in  instrumentation  between  the  two  work  positions. 

After  trimming,  the  amplifier  hybrid  was  checked  for  proper 
operation  at  17.5V  and  30V.  Supply  current  was  measured  to 
determine  maximum  power  dissipation.  The  output  of  the  trip  time 
integrator,  the  minimum  current  detector  and  the  gain  compensation 
amplifier  were  checked  by  simulating  the  voltage  developed  across 
the  current  sensing  resistor.  The  rise/fall  time  amplifier  was 
checked  by  connecting  the  inputs  to  a  DC  potential  and  measuring 
for  a  fixed  output  voltage. 

The  logic  hybrids  were  evaluated  fcr  the  stability  of  the 
on-board  voltage  regulator,  correct  operation  of  the  combinational 
logic  elements,  power  dissipation,  proper  Zener  diode  voltage 
and  switching  capability  of  the  input  circuit  transistors.  Signal 
timing  is  not  incorporated  as  part  of  the  hybrid  evaluation  test. 

Hybrids  that  did  not  comply  with  the  established  standards 
were  evaluated  to  determine  the  nature  of  the  failure  and,  if 
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possible,  the  fault  was  corrected  and  the  hybrid  was  retested. 
Faults  that  were  typically  detected  at  this  stage  would  be 
defective  XC's,  out  of  value  resistors  and  damaged  wire  bonds. 
After  completing  the  hybrid  tests  and  passing  QC  inspection, 
the  control  subassembly  was  constructed.  Three  opto-couplers 
that  had  previously  been  tested  at  125°C  for  transfer  charac¬ 
teristics  and  switching  speed  are  attached  to  the  two  back-to- 
back  substrates. 

4.2  Power  Subassembly 

The  power  hybrid  construction  started  with  the  printing  of 
the  copper  backplane,  copper  conductor  traces  and  an  insulating 
ink  onto  the  BeO  substrate. 

The  substrate  was  populated  in  multiple  steps,  using 
different  temperature  solders.  First,  the  posts  used  to  hold 
the  power  transistor  clips  were  attached  to  the  substrate,  using 
Au  Ge  solder  at  400°C  in  a  hydrogen  atmosphere.  Then  the  power 
output  transistor  and  its  base  and  emitter  clips  were  attached, 
using  solder  preforms  at  330°C  in  a  reducing  H2K2  atmosphere. 

At  this  stage,  the  power  transistors  were  tested  for  leakage 
current.  If  a  stage  was  found  defective  on  a  substrate  mounted 
with  multiple  output  stages,  the  hybrid  would  be  downgraded  in 
current  rating.  Therefore,  two  stages  of  10A  power  hybrid  could 
be  disabled  by  removing  the  transistor  clips,  thus  forming  a  5A 
unit.  Similarly,  the  defective  stage  of  a  designated  5A  unit 
could  be  disabled  and  the  substrate  could  be  used  for  a  2A  or 
1/2A  controller. 
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At  this  point,  the  lower  power  transistors  and  diodes  were 
epoxied  to  the  substrate  and  cured.  All  semiconductors  were 
then  wire  bonded  with  gold  wire.  The  transistor  terminals  that 
would  be  required  to  pass  high  current  were  connected  with 
multiple  bond  wires. 

The  £inal  population  step  was  to  solder  the  pretrimmed  chip 
resistors  to  the  substrate.  The  resistor  values  selected  would 
be  determined  by  the  rating  of  the  power  hybrid.  Prior  to  assembly 
of  hybrid  to  header,  the  epoxy  insulation  was  tested,  placing  the 
hybrid  on  a  wet  blotter  situated  on  the  metal  plate  and  applying 
the  100QV  RMS  test  voltage  between  the  plate  and  each  pin.  Having 
passed  this  test,  the  hybrid  and  header  were  soldered  together. 

The  power  hybrid  was  tested  after  being  mounted  to  the  header 
baseplate.  Prior  to  power  up,  the  unit  was  given  a  visual  examin¬ 
ation  and  the  subassembly  serial  number  was  assigned. 

The  assembly  was  checked  with  1000V  AC  for  dielectric  isolation 
Off-state  leakage  current  was  checked  by  derating  the  specification 
values  given  at  100°C  to  projected  currents  at  25°C.  The  output 
stage  was  tested  at  the  current  rating  of  the  controller  that  it 
would  be  assembled  into.  The  voltage  drop  across  the  output  stage 
was  also  measured  at  the  rated  current.'  The  gain  compensation 
control  circuitry  was  also  exercised  to  insure  that  it  wsuld  deliver 
adequate  drive  current. 
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4.3  Controller  Integration 

At  the  pre-cap  stage,  the  control  subassembly  (logic  and 
amplifier  hybrids  plus  the  three  opto-couplers)  was  press-fitted 
on  top  of  the  power  subassembly  and  temporary  riser  wires  were 
attached  between  the  two  levels.  Since  this  was  the  first  time 
that  all  components  interact  completely  within  the  particular 
controller  module,  tests  were  performed  to  insure  proper  operation 
within  specification  limits.  Isolation,  insulation  resistance, 
and  dielectric  withstanding  high  voltage  tests  were  not  performed 
at  this  stage  since  the  controller  circuitry  was  still  exposed  to 
a  possibly  humid  ambient  environment.  Transient  tests  were  also 
not  exercised  during  pre-cap  evaluation  since  the  controller 
response  to  transients  was  mostly  dependent  on  design  and  not 
component  interaction  variations .  The  only  other  test  not  performed 
at  the  pre-cap  stage  was  the  trip  time  characteristics  at  output 
currents  above  150%. 

In  the  event  that  the  controller  had  failed  any  test  at  the 
pre-cap  stage,  the  unit  cculd  be  debugged  while  still  assembled. 

The  control  assembly  could  easily  be  removed  for  repair  at  this 
stage  since  all  electrical  and  mechanical  connections  were  only 
of  a  temporary  nature.  If  necessary,  the  logic  and  amp.  hybrids 
ccuUbe  separated,  but  most  repairs  could  be  made  with  the  two 
hybrids  bach- to- back.  After  repair,  the  controller  was,  again, 
subjected  to  the  pre-cap  test  phase. 
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After  the  controller  passed  the  pre-cap  test  phase,  the 
control  subassembly  was  permanently  soldered  onto  the  support 
pins,  and  riser  wires  from  the  power  subassembly  to  the  upper 
level  were  permanently  attached.  It  had  been  observed  that 
some  of  the  controllers  had  trip  BIT  voltages  that  were  marginal 
or  slightly  below  the  specification  limits  when  examined  at  the 
pre-cap  test  level.  It  was  determined  that  an  active  trim  to 
R2  on  the  exposed  logic  hybrid  could  easily  be  performed  to  pull 
the  trip  response  level  to  the  center  of  acceptable  limits.  This 
conditional  step  is  shown  at  Block  C6  on  Figure  14b. 

Prior  to  inspection  at  C7,  the  opto-couplers  were  epoxied  to 
the  logic  hybrid  for  additional  support.  After  inspection,  but 
prior  to  having  the  cover  attached,  the  integrated  assembly  was 
subjected  to  a  quick  series  of  tests  to  confirm  that  no  damage 
occurred  during  the  final  solder,  trim  or  epoxy  operations.  The 
header  cover  was  then  fitted  and  soldered  in  place,  the  unit  was 
purged,  baked,  and  backfilled  with  dry  nitrogen  prior  to  sealing 
the  tip-off  port.  The  controller  was  then  tested  for  seal  integrity 
as  outlined  by  the  specification  and  as  part  of  the  Acceptance  Test 
Procedure.  The  serial  number  assigned  to  the  controller  at  this 
point  was  the  manufacturing  line  number  that  was  used  on  its 
power  subassembly. 

The  sealed  controllers  were  then  mounted  on  a  plate,  to  cover 
their  heat  sink  surface.  The  units  were  then  sprayed  with  black 
epoxy  paint. 
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The  first  thirty-one  controllers  constructed  were  then  subjected 
to  vibration  of  2.5  G's  at  S3  Hz  at  temperature  extremes  of  -30°C 
and  +85 °C.  The  period  of  vibration  lasted  ten  minutes  at  each 
extreme  after  temperature  stabilization.  Although  this  processing 
step  was  not  a  contractual  requirement,  it  was  determined  that 
this  stress  cycle  would  insure  confidence  in  the  mechanical  integrity 
of  the  construction. 

Since  problems  did  not  become  evident  due  to  the  shake  and 
bake  cycle,  this  processing  step  was  eliminated  for  the  remaining 
controllers.  The  controllers,  then  proceeded  to  final  testing. 

4 . 4  Controller  Testing 

After  the  final  assembly  step,  the  controllers  were  evaluated 
for  compliance  with  Specification  NO.  NADC-30-TS-7602  dated 
27  April  1976.  This  was  performed  in  accordance  with  contract 
requirements  and  applicable  specification  items  for  DC  controllers. 

All  100  controllers  were  checked  against  the  appropriate  items 
listed  in  Group  I,  Table  III  of  the  specification.  Three  controllers 
of  each  rating  were  additionally  checked  against  the  appropriate 
requirements  of  Group  II  and  Group  III  of  Table  III.  These  controllers 
were  not  required  to  be  tested  for  temperature  shock,  acceleration, 
salt  fog,  or  humidity  as  per  the  contract.  In  addition,  it  was 
agreed  upon  that  NADC  would  perform  vibration,  temperature  altitude, 
radio  interference,  shock  and  life  tests. 

4.4.1  Group  I  Test  Procedure 
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paragraph  lists  the  title  of  the  step  being  performed,  the 
Requirements  and  Quality  Assurance  Provisions  references  to 
specification  Paragraphs  3  and  4,  and  any  applicable  definitions 
given  in  Section  6.5.  The  test  paragraph  also  includes  an 
explanation  of  the  procedure  to  be  performed  at  that  test  step  and 
the  acceptable  limits  allowed. 

The  initial  tests  performed  on  a  controllers  checked  the  high 
voltage  isolation  between  the  terminal  and  case  and  between  the 
control  input  circuitry  and  the  components  tied  to  the  power 
terminals.  The  controller  was  then  connected  to  a  heat  sink  test 
fixture. 

The  Power  Input  terminal  was  connected  to  a  30V,  80A  power 
supply  and  the  Power  Output  terminal  was  connected  to  the  appropriate 
load  via  soldered  wire  connections.  The  Power  Ground,  Control 
Input,  and  Control  Ground  connections  were  made  with  clip-on  leads 
and  fed  to  the  test  control  box.  In  addition,  clip  leads  were 
attached  to  the  Power  Input  and  Power  Output  terminals  so  that 
voltage  measurements  could  be  made  directly  on  the  controller 
without  the  effects  of  the  resistance  of  the  power  lead  wires. 

The  control  and  measurement  leads  were  fed  to  a  test  control 
box  that  contained  a  rotary  switch  for  convenient  measurement 
between  the  various  test  points,  and  a  set  of  voltage  comparators 
used  for  the  accurate  measurement  of  the  power  output  rise,  fall 
and  delay  times.  The  outputs  of  the  voltage  comparators  were  fed 
into  gating  logic  whose  outputs  represented  controller  waveform 
times  and  were  selected  via  a  rotary  switch  to  feed  an  interval 


The  test  procedure  given  in  Appendix  C  includes  both  quanti¬ 
tative  and  qualitative  criteria  used  to  examine  each  controller. 

The  procedure  also  includes  the  set-up  steps  to  be  taken  before 
making  measurements  and  remeasurements  taken  to  confirm  proper 
operation  after  severe  tests  were  performed.  The  quantitative 
measurements  of  the  controller  characteristics  are  shown  in  Table  1. 
Each  column  of  data  represents  a  numbered  step  in  the  test  procedure 
Test  steps  in  which  data  is  not  given  in  the  table  are  explained 
below. 

Steps  1  and  2  confirm  the  mechanical  characteristics  of 
the  controller  at  the  time  of  testing. 

Step  3  assures  that  the  hermetisity  requirement  of  the 
specification  was  met.  All  controllers  were  tested  for,  and 
passed  a  fine  leak  requirement  of  a  leakage  rate  of  less  than 
10 -6  .  AH  controllers  also  passed  the  gross  leak  test 

in  which  no  escaping  bubbles  were  observed  when  the  controller 
was  soaked  in  hot  freon. 

All  controllers  passed  the  di-electric  withstanding 
voltage  of  1000V  AC  RMS  of  Step  4  without  breakover. 

All  controllers  had  leakage  currents  less  than  lu  amp  when 
100V  was  applied  between  the  points  outlined  in  Steps  5  and  6. 
This  is  equivalent  to  isolation  and  insulation  resistances 

greater  than  lOOMfl  for  these  tests. 
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Steps  7,  8,  and  9  are  set-up  and  run-in  procedures  used 
to  assure  proper  operation  before  quantitative  data  was 
taken. 

Steps  10  to  22  results  are  listed  in  Table  1. 

Step  21  is  a  set-up  and  calibration  step  used  in  prepara¬ 
tion  for  the  trip  time  tests. 

Steps  24  to  27  results  are  listed  in  Table  1. 

Steps  28  and  29  are  consequences  of  successful  completion 
of  all  trip  time  tests. 

All  controllers  would  not  reset  when  a  4.5m  sec.  turn 
off  pulse  was  applied  in  Step  30. 

Step  31  results  are  listed  in  Table  1. 

For  Step  32,  all  controllers  had  an  observed  AC  voltage 
drop  of  less  than  .01  volts  with  most  units  reading  about 
.001  volts  AC.  This  can  be  related  to  the  ripple  current 
developed  by  the  controller  into  a  resistive  load.  This 
test  was  performed  only  at  rated  output  current  since  the 
controller  design  did  not  include  AC  developing  circuitry. 

Prototype  tests  indicated  that  controllers  would  not 
produce  a  ripple  current  at  any  intermediate  load  current. 

Al..  controllers  tested  passed  the  common  mode  rejection 
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For  Step  34,  all  controllers  were  £orced  to  a  Fault/Bit 
impedance  and  the  input  current  was  adjusted  to  the  point 
where  the  voltage  between  the  input  terminals  was  15V.  Since 
the  required  input  current  to  obtain  this  voltage  was 
approximately  14  ma.,  maximum  power  was  applied  to  the  input 
circuitry  without  exceeeding  the  maximum  voltage  or  current 
specifications.  Proper  operation  of  the  control  input 
circuitry  after  testing  is  measured  in  Steps  35  to  40. 

Step  35  results  shown  in  Table  1. 

Steps  36,  37,  and  38  remeasure  controller  characteristics 
to  assure  proper  operation  after  trip  time  and  maximum  control 
signal  tests. 

Step  39  remeasures  the  Bit/Fault  level  taken  in  Step  35 
under  a  different  Fault  condition.  All  controllers  had  the 
same  Bit  levels  for  both  Steps  35  and  39. 

Step  40  results  shown  in  Table.  (This  test  step  was  not 
included  in  the  original  test  procedure;  because  of  this, 
some  of  table  entries  are  missing.) 


4.4.3  Group  II  and  Group  III  Test  Results 
Three  controllers  of  each  rating  was  tested  for  the  applic¬ 
able  items  of  Table  m  Group  IX  and  Group  III  of  the  specification, 
after  passing  Group  X  tests.  Included  in  this  group  were  the 
Operating  Voltage  Transient  and  Transient  Spike  Overvoltage  tests 
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applied  to  the  power  terminals  o£  the  controller  plus  the  control 
input  transients  applied  to  the  control  terminals. 

All  twelve  units  were  also  tested  at  temperature  extremes  of 
-54°C  and  120°C,  as  measured  on  heat  sink  to  which  the  controller 
was  attached.  The  test  procedure  that  was  used  for  Group  I  testing 
was  also  used  to  test  operation  at  temperature  extremes,  but  with 
the  test  sequence  starting  at  Step  7.  (See  Appendix  C  for  test 
procedure.)  Test  results  of  measurements  made  at  -54°C  and  120°C 
are  given  in  Taole  2. 

After  being  tested  at  temperature  extremes ,  the  controllers  were 
then  each  tasted  at  room  temperature  for  proper  operation  after 
operating  voltage  transients  and  transient  overvoltage  spikes  were 
applied  to  the  power  terminals  and  control  input  transients  were 
applied  to  the  control  terminals.  Proper  operation  was  assured  by 
testing  each  unit  for  compliance  with  the  applicable  items  of 
Table  IV ,  Group  A  of  the  Specification. 

It  was  observed  that  the  controller  output  would  turn  on  for 
2  to  3  milliseconds  when  the  control  transient  pulse  train  was 
applied.  This  was  determined  to  be  caused  by  the  integration  of 
the  pulse  train  by  the  opto-coupler  Z3  and  delay  time  integrator 
Rll  and  Cl.  Since  the  delay  before  turn  is  allowed  to  be  as  short 
as  lOOji  sec.  and  the  delay  before  turn  off  as  long  as  2.0m  sec., 
it  was  determined  that  this  duration  turn  on  short  was  not  a 
violation  of  the  specification. 
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TAS-I  2.  Teat  r.usulta  -  Oparaeioa  at  Taoperature  Extremes. 
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4.4.4  Bit  Fault  Testa 

One  controller  was  specially  constructed  so  that  the  Bit/Fault 
condition  simulating  a  shorted  power  output  transistor  could  be 
tested  in  accordance  with  Table  II T,  Group  III  of  the  specification. 
This  controller  (483,  1/2A)  had  an  additional  wire  attached  to  the 
emitter  of  the  power  output  transistor.  The  wire  was  then  fed  through 
a  hole  in  the  plexiglas  cover  that  was  used  in  place  of  the  metal 
header  cover.  The  controller  was  then  tested  for  electrical  compli¬ 
ance  with  the  specification  with  the  exclusion  of  the  high  voltage 
isolation  tests.  This  unit  was  then  tested  in  a  normal  condition 
with  a  10m  sec  wide  lOma  pulse  turning  the  output  on  as  shown  in 
Figure  16a.  The  wire  attached  to  the  emitter  of  the  output  trans¬ 
istor  was  then  shorted  to  the  power  output  terminal  to  simulate  a 
shorted  output  transistor  with  the  results  as  shown  in  Figure  16b. 

Note  that  the  initial  Bit  response  indicates  a  Fault  condition 
(11V  control  input  voltage)  since  the  controller  was  passing  output 
current  directly  before  the  input  signal  was  applied.  The  Bit 
response  then  reverts  back  to  the  normal  level.  (7.2V  control  input 
voltage)  since  there  is,  at  that  time,  a  control  signal  to  turn  on 
and  the  controller  is  passing  rated  load  current.  Figure  16c 
shows  the  controller's  fault  response  to  a  50ji  sec.  interrogation 
on  an  expanded  time  scale.  Figure  16d  indicates  the  Normal  Bit 
input  response  with  an  interrogation  pulse  when  the  simulated  fault 
was  removed. 
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BIT  RESPONSE  TEST  SERIAL  #83  1/2A 


30V 


OUTPUT  VOLTAGE 
TO  LOAD 
10V/DIV 


CONTROL  INPUT 
VOLTAGE  RESPONSE 
To  10  ma  INPUT 
5V/DIV 


Horz.  =  0.5  ms/DIV 


igure  16a.  Normal  ou  ..iui  1  ms 

Turn  on  Pulse  Every  5  ms . 


Figure  16b.  Simulated  ”Stuck-on"  Fault  Hcrz.  =  0.5  ms/DIV 
1  ms  Turn  cn  Pulse  Short  Acrosss 
the  Power  Output  Transistor  to 
Simulate  Fault 
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BIT  RESPONSE  TEST  SERIAL  ?83  1/2A 


16c.  Simulated  "Stuck  On"  Fault  Kor 

BIT  Response  Sampled  With 
50  sec.  Interrogation  Pulse 


Horz.  = 

16c.  Normal  Operation  With  50p» 
Interrogation  Pulse 


OUTPUT  VOLTAGE 
10V/DIV 


CONTROL  INPUT 
5V/DIV . 


.  =  10)i  Sec/DIV 


OUTPUT  VOLTAGE 
10V/DIV 


CONTROL  INPUT 
5V/DIV 


10):  Sec/DIV 


-66- 


NADC-76215-30 


4,4.5  Problems  Encountered  During  Testing 

Soma  of  the  controllers  being  manufactured  failed  during 
testing  or  were  determined to  have  an  electrical  parameter  outside 
the  specification  limits.  If  the  malfunction  occurred  during  the 
final  test,  the  unit's  cover  was  removed  and,  if  necessary,  the 
hybrid  substrates  were  taken  off  so  that  the  cause  of  the  fault 
could  be  determined. 

When  the  first  manufactured  group  of  controllers  was  tested 
for  Bit  response  time  at  12Q“C,  it  was  observed  that  some  of  the 
units  would  not  have  a  stabilized  Bit  level  within  the  allowed 
5 Op  sec.  Because  some  of  the  phototransistors  were  observed  to 
have  lag  times  of  greater  than  50  microseconds  at  120 ®C,  all  the 
optocouplers  on  hand  were  tested  for  rapid  response  time  character" 
istics  at  elevated  temperature.  Out  of  369  parts  tested,  237  had 
lag  times  of  less  than  40  microseconds.  Since  each  of  the  100 
controllers  require  three  optocouplers,  an  additional  lot  of  opto¬ 
couplers  were  purchased  and  tested. 

Testing  of  the  10  and  5  Amp  power  assemblies  indicated  a 
greater  voltage  drop  than  anticipated  across  the  output  stage  at 
rated  load.  This  additional  drop  would  cause  an  incorrect  measure¬ 
ment  of  the  controller  output  current  by  the  sense  circuitry.  It 
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was  determined  that  tha  additional  drop  occurred  along  the  printed 
copper  metal  conductor  trace.  A  copper  ribbon  in  parallel  to  the 
conductor  was  added  to  reduce  the  drop  to  an  acceptable  level. 

Three  of  tha  2A  controllers  failed  to  turn  on  after  the  600V 
short-term  transient  was  applied  across  the  power  input  and  ground 
terminals.  A  visual  examination  of  the  assembled  controllers  did 
not  reveal  damage  to  the  power  or  amplifier  substrates,  but  close 
examination  of  the  logic  hybrid  uncovered  blown  ground  metallization 
on  at  least  one  of  the  three  CMOS  IC  chips  on  each  controller.  This 
type  of  failure  will  usually  manifest  itself  if  the  maximum 
specified  CMOS  operating  voltage  is  exceeded.  Since  the  controller 
design  contained  circuitry  to  prevent  overvoltage  on  the  internal 
supply  rail,  those  components  that  should  clamp  or  suppress  trans¬ 
ient  spikes  were  suspected  as  being  defective. 

Two  Zener  diodes  located  on  the  power  hybrid  were  incorpor¬ 
ated  so  as  to  clamp  the  input  spikes  to  a  maximum  80  volt  level 
which  can  safely  be  further  reduced  internally.  Further  testing 
revealed  that  due  to  the  slow  response  of  some  of  these  diodes, 
spikes  of  up  to  120  volts  were  being  passed  to  the  system.  This 
fact  in  conjunction  with  the  breakover  of  a  protection  diode 
located  in  the  internal  voltage  regulator  would  pass  a  higher 
than  allowable  voltage  onto  the  12.5  volt  supply  rail.  This  then 


NADC-76215-30 


resulted  in  the  destruction  of  the  CMOS  devices.  To  correct  the 
possible  deficiency  of  the  Zener  diode  response  time,  a  0.1  micro¬ 
farad  capacitor  was  added  between  power  input  and  ground  to  absorb 
the  initial  surge  until  the  Zener  takes  effect. 

A  few  5  amp.  controllers  failed  preliminary  testing  by  produc¬ 
ing  oscillations  on  the  power  output  line  during  the  turn  on  and 
turn  off  transitions.  An  examination  of  the  test  bench  set-up 
revealed  a  poor  power  ground  system.  After  correcting  this  defic¬ 
iency,  all  but  one  of  the  units  operated  correctly  during  the  rise 
and  fall  time  period.  The  sixth  unit  was  diagnosed  to  have  a 
defective  component  in  the  closed  loop  circuitry  that  produces 
the  transition  period  slopes. 

During  the  production  and  testing,  seven  controllers  encountered 
catastrophic  failures  during  trip  time  tests.  When  these  units 
were  tested  with  a  short  between  the  output  lead  and  ground  in 
accordance  with  the  specification,  the  controllers  would  not  trip 
out  in  less  than  1  millisecond  as  required,  but  would  stay  on  for 
a  longer  duration  until  the  sense  resistor,  acting  as  a  fail-safe 
fuse  would  blow  out.  When  the  power  decks  of  these  units  were 
examined,  it  was  found  that  in  addition  to  having  an  open  sense 
resistor,  the  main  power  transistor  had  cratered  under  the  emitter 
contact  lead.  The  cause  of  this  type  of  failure  could  be  due  to 
the  control  circuitry  keeping  the  power  stage  on  for  too  long 
during  the  overcurrent  condition,  thus,  causing  secondary  break¬ 
down,  or  because  of  premature  secondary  breakdown  due  to  a  weak 
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pass  transistor  in  the  power  stage  latching  the  output  on  even 
though  the  control  to  turn  on  had  been  removed. 

Some  of  the  failures  were  caused  by  the  control  circuitry 
keeping  the  pass  stage  on  for  too  long  until  the  designed  energy 
limit  of  the  transistor  was  exceeded.  This  was  attributed  to 
problems  in  the  test  equipment  resetting  the  control  circuitry. 

Examination  of  the  pulse  generator  signal  that  develops  the 
* 

input  to  turn  the  controller  on  indicated  that  some  switch  bounce 
from  the  pushbutton  actuator  was  being  passed  through  the  system. 
This  had  the  effect  of  resetting  the  trip  out  period  and  then 
turning  the  controller  back  on  before  the  controller  could  normally 
trip  out.  This  allowed  the  controller  to  be  turned  on  for  a  longer 
accumulated  period  than  intended  between  trip  out  times.  The 
transistor  would  then  short  from  emitter  to  collector  due  to 
secondary  breakdown  and  would  remain  on  until  the  sense  resistor 
would  blow  open. 

Although  it  was  observed  that  at  least  one  unit  had  failed 
due  to  the  double  pulse  cause,  it  is  certain  that  an  additional 
unit  failed  due  to  other  reasons.  To  prevent  double  pulses  in  the 
future,  an  additional  circuit  was  built  into  the  test  set-up  that 
would  turn  the  controller  on  for  a  20-second  period. 

It  was  determined  that  the  remaining  damaged  power  decks  did 
not  fail  because  of  faulty  external  operation,  but  due  to  voids 
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under  the  transistor  formed  during  assembly.  These  voids  would 
cause  hot  spots  on  the  transistor  surface  that  would  account  for 
the  premature  breakdown.  X-ray  photographs  were  taken  of  the 
damaged  power  decks  to  examine  the  transistor  contact  area.  In  a 
few  cases,  the  drive  transistor  and  not  the  pass  transistor  had 
the  high  void  concentration.  Since  it  was  observed  that  the  pass 
stage  sustained  the  damage,  it  is  presumed  that  the  driver  prematurely 
broke  down,  thus,  turning  on  the  pass  unit  for  too  long  until  it, 
too,  broke  down  and,  then,  shorted  until  the  sense  resistor  opened. 
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5 . 0  RECOMMENDATIONS 


Tha  difficulties  involved  in  producing  100  controllers  point 
out  the  areas  that  could  be  improved  on  to  ease  manufacturing  for 
large  quantity  production.  Testing  the  controllers  to  meet  the 
specification  also  indicated  parameters  that  would  be  advantageous 
to  change  to  produce  lower  cost  power  controllers.  It  is  therefore 
recommended  that  the  following  modifications  be  incorporated  into 
a  controller  specification  for  building  production  quantities. 

Increase  the  control  input  current  from  the  nominal 
,  lOma  value  to  at  least  15ma.  This  will  ease  the  selection 
among  the  few  opto-couplers  that  operate  at  120 °C.  Another 
benefit  of  a  higher  input  control  current  is  that  the  internal 
biasing  resistances  of  the  control  circuit  may  be  decreased 
which  will  decrease  the  Bit  response  settling  time. 

It  is  suggested  that  the  mechanical  specification  require 
that  one  of  the  glass  feed  through  insulators  on  the  header  be 
a  differenct  colored  glass  for  indexing. 

If  the  minimum  current  detection  range  for  a  fault  could 
be  defined  to  be  approximately  15%  of  rated  current  with  a 
tolerance  of  plus  or  minus  7%  of  the  rated  current  level ,  then 
the  precision  of  the  internal  voltage  supply  and  reference 
voltages  could  be  reduced. 

It  is  also  suggested  that  the  additional  items  be  speci¬ 
fied  and  tested  for  future  qualification: 
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l 
) 

\ 

i 

voltage  drop  from  Pwr  In  to  Pwr  Out  at  over  current  levels.  j 

The  allowable  output  spike  when  power  is  initially  applied  . 

to  the  Pwr  In  terminal.  j 

Minimum  voltage  operation.  j 

That  the  Fault  Bit  response  will  over-ride  Trip  when  the  j 

voltage  is  removed  from  the  Pwr  In  terminal.  j 
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HA01  POWER  HYBRID  PARIS  LIST 


10A 

5A 

R24 

100 

200 

R2S 

130 

130 

R26 

500 

800 

R27 

.08  ohm 

.08 

R28 

50 

50 

R29 

.08  ohm 

.08 

R30 

50 

50 

R31 

.08  ohm 

R32 

50 

R33 

.08  ohm 

R34 

50 

R64 

8 

16 

R65 

IK 

IK 

R66 

IK 

IK 

R67 

IK 

R68 

IK 

04 

1K4148 

1N4148 

06 

1N3Q4QB 

1N3040B 

D7 

1N3040B 

1N3040B 

Q3 

2N6316 

2N6316 

Q4 

2N3019 

2N3019 

Q5 

2N6316 

2N6316 

Q6 

2N5339 

2N5339 

Q7 

RCA  67654 

RCA  67654 

Q8 

2N3792 

2N3792 

Q9 

RCA  67654 

RCA  67654 

Q10 

2N3792 

2N3792 

Qll 

RCA  67654 

Q12 

2N3792 

Q13 

RCA  67654 

Q14 

2N3792 

CX 

.1  uF 

.1  uF 

2A 

1/2A 

500-lK 

1K-2K 

130 

130 

2X 

4K 

.10 

.40 

50 

IK 


1N4148 

1N3040B 

1N3040B 

2N6316 

2N3019 

2N6316 

2N5339 

RCA  67654 

2N3792 


300-510 

IK 


1N4148 

1N3040B 

1N3040B 

2N6316 

2N3019 

2N6316 

2N5339 

RCA  67654 

2U3792 


.1  UF 


.1  uF 


A-l 
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HB01A  LOGIC  HYBRID  PARTS  LIST 


R1 

100  K 

Dn trimmed 

R2 

560 

R3 

820 

R4 

13  K 

R5 

15  X 

R6 

200 

R7 

410 

R8 

20  X 

R9 

3.9  X 

RIO 

3.9  X 

Rll 

250  X 

R13 

1.8  M 

R16 

510  X 

R17 

510  X 

R18 

90  X 

R55 

R56 

13  X 
17.5 

~y  Active 

R57 

2.7  X 

R58 

7.5  X 

R69 

680 

Cl 

1000  pF 

C2 

4700  pF 

C3 

0.01  U 

C7 

1000  p 

C9 

0.01  U 

CIO 

0.01  H 

D1 

MCC3.6A 

D5 

MZ43B10 

D8 

1N4148 

B2 

U1  CD407QBH  (TA6950) 

U2  CD400IBH 

U3  CD4011BH 

U7  LM723H 


Q1 

2N5550 

Q2 

2N5550 

Q15 

2N5550 

Q16 

2N2484 

Q17 

2N3251 

Q18 

2N2484 

Q19 

2N3019 

Q20 

2N5550 

Q21 

2N5550 

Q22 

2N5550 
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r 


HB02 

AMPLIFIER  HYBRID  PAJ 

R14 

92  K 

R15 

47  K  Active  Trim 

R19 

75  K 

R35 

15  K 

R36 

56  K 

R37 

15  K 

R38 

15  K 

R39 

100  K 

R41 

465  K 

R42 

476  K 

R44 

20  K 

R45 

63  K 

R46 

8.1  K 

R47 

8.8  K 

R48 

46  K 

R49 

4  K 

R50 

15  K 

R51 

410  K 

R52 

406  R 

R53 

92  K 

R54 

47  K  Active  Trim 

R61 

320 

R62 

3.3  K 

R63 

1.2  M 

C4 

1000  p 

C5 

0.1  u 

C6 

0.1 

C8 

0.01  u 

U5 

CA324H 

06 

CA339H 
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D  C  CONTROLLER  PARTS  LIST 


Header /Power  Hybrid  (HA01)  subassembly 
Logic  Hybrid  (HB01A) 

Amplifier  Hybrid  (HB02) 

21  OPI1991 

22  OPI1991 

23  OPI1991 

03  1N4002 

Header  Cover 
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APPENDIX  D 
SPEGFICATICN 


1-76215-30  * - -  ■’ 

SFLCUICAZZOH  210.  lWDC-30-T3-7602/0i 

27  APR  i3/i 


tKLXTAKf  SPECIFICATION  SHEET 

FOWTE  C0TT20LLE2,  DC  LOAD  rJITCHTSO 
SWT,  dOKHAL  OPsii,  i  TuM  10  M PtStES 


The  compUta  requirements  for  procuring  the  controllers  described  herein 
shall  consist  of  this  document  and  the  latest  Issue  of 


.062*.  002 
DU 
7  PENS 


.20s. 02 


iDEsmytCATtoy 

nmenow 

Power  In 
Power  Out 
Power  Ground 
Control 
Signal  Ground 


.300s.  010- 
TYP 


-*—.1.27  SQ  — — 

p9oos.oio^ 


i  I  FT.  t 

•"ST  -I1¥k-4- 


.173  DU- 
3  HOLES 


m 


r— xjti 


SLOT 

Id) 


£.700*.  oio 


•2. 730s. 010 
•  2. 150*. 060- 


Xtor  {*) 
RATING 
AMPERES 

_ 1/2 _ 


"A"  MAX  WEIGHT 


3.0  OZ 


NOTES:  (a)  Name  plate  location. 

<b)  Pin  designations  arc  for  reference  only  and  do  not  appear  on  header. 
|e) .  Terminals  shall  be  tla  plated  followed  by  a  now  process  or  costed 
with  composition  Sn  -10  to  So  70  solder  conforming  to  QQ-S-571. 
l«*>  TS7602/01-CCL,  002  &  003  only 
<•),  IS7602/01-001,  &  002  only 
(f)  TS7602/OI-OOI  only 


>  *#■*«*  —I 'WWf  r* r "•'.'Hlfnr ^ 
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8fBCl?Icm<W  80.  KAUC-30-TS-T602/01 

*  1  876 

Requirements.*  . 

MECHANICAL  AND  DIMENSIONAL  CHARACTERISTICS 


Configuration .  Sm  Figure  l 

Dimensions  . .  Inch— 

Tolerances . . .  *0. 02  for  two  pUc«  decimals 

*0. 005  for  three  piece  decimals 

Enclosure  . . .  Type  4 

Weight  . .  See  Figure  l 

Mounting  torque . .  •  •  *  •  15  la.  lb. 

Terminal  strength 

Pull  test  Condition  A  -  10  pounds- 

Bend  test . .  Condition  C  -  5  pounds 

leak  ate  .  .  .'. . .  lo**  aei  cc/see. 


THERMAL  CHARACTERISTICS 

Theraul  resistance  case-to-sinic 

Best  sink  temperature  .... 

(design  consideration) 

ELECTRIC  CHARACTERISTICS  (-54  to  120*C  case  temperature  unless 

'  ”  otherwise  specified) 


0.  SO* C/watt  with  specified 
mounting  torque 
See  Table  I 


General 

Circuit  arrangement  •  •  •  • 
Insulation  resistance  •  •  •  • 
Dielectric  withstanding  voltage 

Isolation . . 

Life  (operating  cycles)  .  .  . 

Radio  interference . 

Leakage  current  ...... 

Power  dissipation 


'ON' .  See  Table  I 

’OFF* . .  See  Table  I 

Common  mode  rejection  ..........  Applicable 


30  volts  dc  sextans  a 
38  volts  dc  rated 
17.5  volts  dc  Biaisua 
80  volts  dc  eaxlsua  (50  as) 
9*9  volts  de  ainiaua  (50  os) 
±£00  volts  dc  (10  ajjoules  sax) 
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Power  Circuit 

Supply  voltage 

Steady  state  ...... 

•  •  • 

(_■  Transient  (long  tera)  t 

Transient*  (short  tern) 


SF5T  NO 

100  megohms  ralntmnTn 

Applicable 

Applicable 

10s  minimum 

Applicable 

See  Table  l 


^  «*Ai) ftOvOtte 


>rar. .  t  * 
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spscmcAxios  so.  sadc-bo-ts-76o2/oi 
2  7  m 


Current 

Rated  (no  load  to  1 0OTc  rated) 

Frequency  (rated) . 

Voltage  drop  too  load  to  rated) 


Current  limiting . . 

Ripple  current 

(no  load  to  100(J.  rated) . 

(in  current  limit  to  short  circuit) 

Rupture  capacity . •  • 

DC  offset  voltage  ........ 

let  through  current 

Amplitude  . . 

Time . . 

rpU  safe  . 

Reset  Immunity . . 

Transients 

Operating  voltage  ....... 

Spike  overvoltage . 

Standby  power. . . 

Response 

Turn  on  time . 

Rise  time. . . 


See  Table  l 
Not  applicable 

1.2  volts  dc  maximum  I  -5U°c 
•9  volt  dc  marl  am  d  10Q°C 
270-3302  rated  load 

3*5  rated  maximum 
S %  rated  maximum 
Unlimited 
Not  applicable 

330<  of  rated  current  maximum 
10  milliseconds  maximum 
See  Figure  1 
Net  applicable 

Applicable 
Applicable 
Not  applicable 


Turn  off  time 


«  »U  UIU« 


Turn  on  delay 


Trip  free . 


1*5  milliseconds  maTrirTyrr^ 
0.1 'milliseconds  minimum 
0.5  milliseconds  maximun 
2.0  milliseconds  maximum 
0.1  miillsecoR'ts  minimum 
2^0  milliseconds  maximum 
0.1  Billiseconds  sinistra 
1.0  Billiseconds  naxlous 
Applicable 


Wp  tie*  .  . . See  Figure  1 

Nonrepetltive  reset  .  .  . . Applicable  (30  seconds 

minimum  between  resets) 

Repetitive  reset . .  Applicable 


*•”  ”“»«*  -  ......  .  ~ot  mpplicmbi* 

tm  eurruut  tun  .fir . Hot  .ppllcbl. 

Control  Circuit 

Supply  voltage  . . J  .  .  .  ’  15.0  volts  dc  mxlmiu 

15*0  nllliaeperes  eaxioun 

Surn-on  Current  .  ..........  10. 0  nilllasperes  rated 

9,0  ailliaaperes  at  m aua 
Turn-o«  Current . .  i.o  niUlacgeres  caxiaua 


f: 
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Control^ClreuifcCcoejT) 


3RS37XCAH0N  HO.  HADC-30-TS-7b02/01 

Z  l  Wet.  &7S 


321  Input  lapedances  sad  signals  (+10%) 
Fault  «••••••••••••• 

Hormal  . . . 

Trip  . . .  • 


1.1k  ohns,  11  Volts  de 
720  ohas,  7.2  Volta  do 
420  ohms,  4.2  Volts  de 


RsacrvaL  tins  to  resot 


5.0  milliseconds  ainlaus 
20.0  Billiseconds  caxiam 


Tun  on  voltage  .  .  . 

Sate  of  change.  .  . 
Turn  o EL  voltage  .  .  . 

Bate  of  change ... 
Input  transients  .  .  . 

-  Beset  Circuit 

Supply  voltage . 

Beset  voltage  ..... 

Bate  of  change .... 
Input  transients  .... 
Application  tine  to  reset 


Not  applicable 
Not  applicable 
Not  applicable 
Not  applicable 
Applicable 


Not  applicable 

Not  applicable 
Not  applicable 
Not  applicable 
Not  applicable 


I 

l 


ENVIRONMENTAL  CHARACTERISTICS 

Case  temperature 
Operating ........... 

Storage  (nonoperating) . 

Shock 

Mechanical  . . 

Temperature  . . 

Vibration . . 

Acceleration  .......... 

Salt  log . 

Humidity  . . . 


-54*  C  to  120*C 
-WC  to  150-C 

100  G  for  11  milliseconds 
-54* C  and  71*C 
Applicable 
100  0 
Applicable 
Applicable 
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SPECIFICATION  NO.  KADC-30-XS-7602/01 

2  7  APR  1978 

Operation  it  temp,  ertraan  ........  •  Applicable 

Temperature-altitude  .  .  .  . .  Applicable 

Ope  rating  ambient 

Temperature .  -54*C  to  93* C 

Altitude  ■  . .  Sea  level  to  100,000  fee t 


TABLS  I.  Dash  number*  and  a~*!lrafr* c  characteristic 


Part  No.  Current 
flatinsf  {1} 
TS76Q2/Q1  Amperes 


-  Watts  Max 


OFT  f  Current- Max 

(Microamperes) 


(1)  Steady  state 


17.0  f  Ifi-O* 


1  7>r  '•  •  ys*^ye--v-_r..* 


'j* 


FIGURE  I  ALTERS  TE  TRIP  CHARACTERISTICS 
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1.0  INTRODUCTION 

This  failure  mode  analysis  has  been  prepared  in  response 
to  Paragraph  7  of  the  Work  Statement  No.  30P9 — Solid  State 
Power  Controllers/  dated  6  April  1976.  The  analysis  has  been 
conducted  in  accordance  with  Paragraph  3.4.2  of  the  Reliability 
Program  Plan  for  Power  Controller  DC,  Load  Switching,  dated 
15  October  1977.  The  design  data  basis  for  this  analysis  is 
the  final  design  of  the  OCPC  as  presented  elsewhere  in  this 
report. 

2.0  FUNCTIONAL  ANALYSIS 

The  failure  mode  analysis  is  derived  from  a  functional 
analysis  of  the  controller.  The  major  functions  of  the  controller 
with  respect  to  the  power  input  and  output  terminals  are  as 
follows: 

The  controller  will: 

1)  Turn  on  within  the  specified  rise  time  delay  limits 
when  commanded  on. 

2)  Turn  off  within  the  specified  fall  time  limit  when 
commanded  off. 

3)  Trip  out  within  the  specified  time  limits  and  will 
not  trip  out  prematurely. 

4)  Maintain  the  Power- Input- to-Power-Output  voltage  drop 
below  the  specified  limit. 

5)  Maintain  the  power  dissipation  below  the  specified 
limits. 


E-l 
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6)  Maintain  current  leakage  at  the  Power  Output  below  the 
specified  limit  when  off. 

7)  Provide  the  specified  current  limiting. 

8)  Maintain  correct  operation  (no  trip  out)  after  exposure 

to  the  specified  long-term  and  short-term  transient  voltages 
at  the  Power  Input. 

The  internal  functions  of  the  controller  are  identified  and 
grouped  into  three  major  subfunctions  as  shown  in  the  controller 
functional  block  diagrams  of  Figure  3  (Logic) ,  Figure  5  (Amplifier) 
and  Figure  8  (Power)  in  Section  2  (Circuit  Design  and  Operation)  of 
this 'report.  These  three  major  elements  (plus  a  separate  semi¬ 
conductor  diode)  represent  the  physical  partitioning  of  the  controller 
into  hybrids  with  interconnections  as  shown  in  Figure  1.  The  output 
signals  (lines)  from  each  hybrid  or  deck  to  the  other  two  are  the 
outputs  whose  failure  modes  and  effects  are  analyzed  and  recorded  in 
detail  in  this  appendix. 

3.Q  FAILURE  MODE  ANALYSIS  PROCEDURE 

The  output  signal  lines  were  grouped  by  major  subfunction  and 
analyzed  one-by-one  in  terms  of  failure  modes  and  effects.  First, 
each  output  line  was  identified;  then,  the  major  possible  failure 
modes  were  determined;  the  failure  effects  on  the  other  two  major 
subfunctions  and  on  the  controller  power  output  were  obtained;  the 
symptom  of  failure,  if  any,  presented  to  the  controller  input  terminals 
wad  deduced. 

The  conditions  attendant  on  the  analysis  of  each  individual 


failure  mode  are  as  follows: 
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1)  Only  a  single  failure  has  occurred  (the  probability  of  a 
time  overlap  double  failure  occurrence  is  so  low  as  to 
be  negligible) 

2}  The  controller  has  been  thoroughly  debugged  and  tested  and 
is  running  normally  (commanded  on  or  off)  just  prior  to 
failure. 

3)  The  failure  symptons  recorded  are  those  directly  available 
to  the  external  system  observed  as  voltage  levels  at  the 
control  input  of  the  controller;  indirect  symptoms  such  as 
the  reaction  of  the  controller-fed  load  equipment/  and  its 
subsystem  and  system  are  assumed  not  to  be  always  available 
or  to  be  ambiguous  with  respect  to  the  location  and  cause 
of  failure. 

4)  Control  input  terminal  voltage  levels  are  considered  to 
provide  Bit  status  information  and  fault  symptoms;  they 
do  not  provide  a  major  function  controller  output. 

4.0  ANALYSIS  RESULTS 

Failure  modes  and  effects  are  documented  on  the  FMEA  (failure- 
modes-and-ef facts)  Table  E-l  attached: 


1) 

Logic  hybrid  outputs: 

Sequence 

Nos.  1-3 

2) 

Amplifier  hybrid  outputs: 

Sequence  Nos .  4-8 

3) 

Power  hybrid  outputs: 

Sequence 

Nos.  9-10 

Several  of  these  failure  modes  and  their  resultant  effects 
were  noted  during  debugging  and  testing  of  the  one  hundred  controllers 
produced. 
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EFFECT  Of  FAILURE  NODE 


TABLE  E- 


NADC-76215-30 


TABLE  E-l 

SYMPTOM  DESCRIPTION  LIST 


Condition  A 

Fauit  BIT  state  indicated  at  control  input  terminals  during 
steady  state  application  of  input  signal.  Normal  state  indicated 
when  input  terminals  are  interrogated  with  50ps  pulse. 

Condition  B 

Control  input  terminals  will  indicate  a  trip  state.  The  input 
terminals  may  indicate  a  fault  condition  when  interrogated  with  a 
50jis  pulse. 

Condition.  C 

If  the  +12. 5V  supply  line  voltage  goes  above  20V,  the  CMOS 
logic  may  be  damaged,  in  which  case,  either  symptom  condition  A  or 
D  may  be  evident.  An  increase  in  the  12.5V  line  voltage  will  cause 
a  slufting  up  of  the  trip  curve;  therefore,  the  controller  may  not 
trip  out  during  over  current  conditions.  The  increase  of  the  thresh¬ 
old  levels  may  also  cause  a  steady  state  fault  indication  when  the 
controller  is  passing  current  above  the  normal  minir-m  current  level 
(315%) . 

Condition  D 

Controller  output  will  not  switch  off.  Normal  BIT  state  indicated 
when  input  signal  applied.  Fault  state  indicated  when  interrogation 
pulse  applied. 

Condition  E 

During  over  currant  condition,  the  trip  current  level  is  detected 
but  control  logic  may  be  stuck  so  that  trip  BIT  state- is  indicated 
but  controller  does  not  turn  off. 

Condition  F 

Solid  State  switch  will  not  saturate;  thus,  the  power  output 
terminal  voltage  will  be  below  normal.  Depending  on  this  voltage, 
the  output  current  to  the  load  may  produce  a  Normal  or  a  Fault  BIT 
state. 

Condition  G 

Controller  will  not  trip  out  when  an  overcurrent  condition 
exists.  Normal  BIT  state  indicated  at  input  terminals. 
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Condition  H 

Controller  will  not  turn  on.  BIT  TRIP  indication  returned 
at  steady  stats  turn-on  and  during  interrogation  pulse. 
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